Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/45699544-4270-3a70-96d8-83ace8ccaea0.roa
File:                     45699544-4270-3a70-96d8-83ace8ccaea0.roa (raw, json)
Hash identifier:          Qq0BGe/PYPFn8J+UXbotKvMfsSZ86PXqNDZndfGxDNc=
Subject key identifier:   B3:91:6C:02:31:0E:50:58:D9:77:60:53:BC:BA:3C:5A:2E:7A:C9:48
Certificate issuer:       /CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
Certificate serial:       010D0C9F4328584D703FD7E2ACDB32F18737D700
Authority key identifier: B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/45699544-4270-3a70-96d8-83ace8ccaea0.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     812
IP address blocks:        173.195.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:d7:e2:ac:db:32:f1:87:37:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=bd293fed-c039-4098-8de1-48ec3b1ec3f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:88:34:03:1f:c8:a4:28:23:3c:d5:29:9f:21:
                    e0:d2:44:c2:b5:64:86:e7:2d:e1:91:50:43:d5:ac:
                    93:7d:85:4d:df:c7:29:4a:04:ab:33:7e:ef:e6:35:
                    9a:9d:51:e7:c0:3b:6e:e6:9c:12:1b:d8:bf:08:58:
                    fd:3f:97:2a:81:a7:61:19:cd:73:4c:76:fd:f5:01:
                    81:1b:bb:45:3b:9e:7c:ee:71:ed:61:d0:29:d5:df:
                    c9:79:ea:0c:df:ff:d8:2b:1a:eb:9e:53:aa:4f:e6:
                    d9:59:d5:89:79:32:30:ee:8a:f9:74:a1:69:7c:f3:
                    f7:fd:e0:94:94:15:bb:63:df:16:1e:b9:95:3f:a0:
                    e8:e6:67:e3:f9:0e:91:84:31:27:97:cf:ba:8c:05:
                    50:39:5c:6c:bb:e1:5c:09:ad:1f:d0:7d:ed:cc:b7:
                    84:41:6c:61:80:c1:78:12:53:f7:b8:47:56:b9:44:
                    42:29:94:0d:10:98:46:53:8f:2f:5e:7d:2c:89:08:
                    f6:b8:5a:be:f8:18:9e:8a:e8:18:51:0f:7b:81:0e:
                    94:c6:83:02:c8:15:73:f2:e2:c8:f4:47:4f:49:43:
                    d7:9a:b2:fb:2c:32:03:a7:d5:16:d9:da:92:5e:3b:
                    13:1a:e8:83:5a:b5:b5:6b:73:13:df:c3:b6:ce:5c:
                    1c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:91:6C:02:31:0E:50:58:D9:77:60:53:BC:BA:3C:5A:2E:7A:C9:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/45699544-4270-3a70-96d8-83ace8ccaea0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl

            X509v3 Authority Key Identifier:
                keyid:B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.195.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:5b:3e:d3:f6:25:01:6b:59:50:92:8d:51:9c:17:bb:15:06:
         16:33:b0:f9:98:4c:1b:f0:c5:00:0b:8b:94:e2:83:e8:b4:b2:
         18:e6:6b:32:c9:0b:f4:93:49:2f:83:b9:03:59:f7:4d:c9:35:
         ea:fc:c8:16:87:c3:44:0e:dc:cf:bc:91:69:93:6f:06:10:9e:
         b3:d1:24:30:6c:48:e0:b4:6f:97:75:54:0b:75:11:46:d3:90:
         2b:8b:09:26:de:32:d3:62:23:aa:a0:d1:6d:d7:22:d6:95:62:
         ce:1c:77:6f:47:cb:cf:6f:04:f4:d4:54:92:a0:d8:06:a1:1b:
         3e:e7:cd:a9:24:d4:3c:77:29:69:fd:2b:c1:c5:ba:47:f5:f0:
         e4:37:68:2a:59:78:83:a9:5c:ad:b5:eb:4b:77:0a:6e:f8:b8:
         8c:e8:45:b5:81:37:b0:5a:1b:f4:47:ba:25:5f:91:83:7c:ab:
         43:2d:b2:93:9e:39:13:69:cb:25:08:a8:45:41:87:8d:a3:f6:
         d9:c6:53:18:43:dc:8a:ac:d8:82:16:d0:b5:c0:6d:e9:7a:2d:
         dd:25:4c:7e:22:c9:aa:5a:cf:ee:b6:3e:1c:12:e7:0f:e1:51:
         5b:bf:5f:04:72:47:0c:8f:07:d9:74:55:da:32:ca:dd:df:7d:
         f0:85:8d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:04:33 2026 by rpki-client